Switch port analyzer
Wireshark 로 하던 cable to cable packet capture를 (Client to server or vise versa) Protocol을 이용해서 포트에 걸어가지고, 우리 랩탑에서 스위치 그 포트에 꽂았을때 패킷 캡쳐 할수잇또록 하는 기술 This why this protocol called switch port analyzer
Switch - Client == SPAN
Switch - Switch == RSPAN
Switch - Router - Switch == ERSPAN
SPAN also referred to as port mirroring
Packet copies are sent to a traffic analyzer (wireshark or other traffic analyzing tool)
Analyzers aggregate and sort data in a visual manner
Local SPAN : Traffic captured and mirrored locally
Remote SPAN (RSPAN) : Monitor multiple remote switches, traffic copied to a central traffic analyzer
Encapsulated Remote SPAN (ERSPAN) : Cisco proprietary version, Uses generic routing encapsulation (GRE)
- For implement, we don't need to create GRE session and etc… just set the ip address and other configuration on the switch -> cisco minimized the configuration as much as they can
Creating monitoring session, and send the data (work method)
Destination is the some special VLAN we have to create
'Networking > Network General (Anything)' 카테고리의 다른 글
802.1x protocol , Port-Security (0) | 2025.04.17 |
---|---|
RADIUS (AAA) (0) | 2025.04.17 |
Zigbee (0) | 2025.04.17 |
Virtual Machine Network (0) | 2025.04.02 |
ESXI Server Network 구성 (0) | 2022.10.06 |